Integrate your device with RTBH.network and automatically block malicious IPs
Integrate your FortiGate device with RTBH.network
This setup is valid for FortiGate 6.0 and above versions. Some commands may differ in older versions.
Create external connector for RTBH.network in FortiGate:
config system external-resource
edit "RTBH-Network"
set type address
set comments "RTBH.network"
set resource "https://list.rtbh.network/"
next
end
Create firewall policy to block malicious IPs:
config firewall policy
edit 0
set name "Block-RTBH-Malicious-IPs"
set srcintf "any"
set dstintf "any"
set srcaddr "RTBH-Network"
set dstaddr "all"
set service ALL
set action deny
set schedule always
set status enable
set logtraffic all
next
end
Your FortiGate device will now automatically block malicious IPs coming from the RTBH.network list in sync.
You can use RTBH.network with BGP session.
You can set up BGP to use the RTBH.network list on your Juniper device.
You can learn BGP information from the RTBH panel.
Due to the number of IP addresses, it is recommended to install it on devices such as MX series routers.
You can use RTBH.network with BGP session.
You can set up BGP to use the RTBH.network list on your MikroTik device.
You can learn BGP information from the RTBH panel.
Apart from BGP, you can download the RSC file from the IP List page and import it.